Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/A59CF620A65B79C6CFCDD929FFE39B48A3CBF52DDB92C6B536AEE34C648130F9/0/34352e3138342e3130322e302f32342d3234203d3e203631343638.roa
File:                     34352e3138342e3130322e302f32342d3234203d3e203631343638.roa (raw, json)
Hash identifier:          MwTmK/jUzUNWGNDs+Tmqd57B2FEJStfbls60ZkelPxc=
Subject key identifier:   60:E8:30:4A:BB:6A:AD:E6:68:40:AA:61:3A:21:7F:42:B5:E9:29:64
Certificate issuer:       /CN=B1584F435951195F9A1F345DE3A71C0FFAED9417
Certificate serial:       515ED25035053B2645BDB4289486DBE293608E40
Authority key identifier: B1:58:4F:43:59:51:19:5F:9A:1F:34:5D:E3:A7:1C:0F:FA:ED:94:17
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/B1584F435951195F9A1F345DE3A71C0FFAED9417.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/A59CF620A65B79C6CFCDD929FFE39B48A3CBF52DDB92C6B536AEE34C648130F9/0/34352e3138342e3130322e302f32342d3234203d3e203631343638.roa
Signing time:             Tue 04 Feb 2025 18:29:03 +0000
ROA not before:           Tue 04 Feb 2025 18:24:03 +0000
ROA not after:            Tue 03 Feb 2026 18:29:03 +0000
asID:                     61468
IP address blocks:        45.184.102.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/A59CF620A65B79C6CFCDD929FFE39B48A3CBF52DDB92C6B536AEE34C648130F9/0/B1584F435951195F9A1F345DE3A71C0FFAED9417.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A59CF620A65B79C6CFCDD929FFE39B48A3CBF52DDB92C6B536AEE34C648130F9/0/B1584F435951195F9A1F345DE3A71C0FFAED9417.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/B1584F435951195F9A1F345DE3A71C0FFAED9417.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Tue 08 Apr 2025 22:09:36 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            51:5e:d2:50:35:05:3b:26:45:bd:b4:28:94:86:db:e2:93:60:8e:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=B1584F435951195F9A1F345DE3A71C0FFAED9417
        Validity
            Not Before: Feb  4 18:24:03 2025 GMT
            Not After : Feb  3 18:29:03 2026 GMT
        Subject: CN=60E8304ABB6AADE66840AA613A217F42B5E92964
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ae:7f:0c:c6:20:fe:24:cb:bb:70:bd:c0:78:50:
                    6c:6b:07:05:18:87:8a:25:15:32:82:f1:52:4e:12:
                    6e:c0:55:bb:ef:e0:ec:d1:f0:31:63:c5:58:31:1b:
                    3f:a4:7d:1d:90:02:ef:a5:aa:b5:f5:ce:5c:32:d8:
                    a6:9e:42:20:6f:97:c5:de:c7:d1:35:d3:ec:8b:57:
                    59:86:5b:14:65:2a:d2:ff:4c:cb:87:e2:b8:ed:23:
                    de:a3:83:ef:bf:33:f3:18:b0:f2:6e:c2:c6:d3:05:
                    49:cb:97:c2:2d:fe:98:a2:6b:c8:33:f0:4d:b6:44:
                    a8:b8:77:91:68:67:65:b7:e5:24:1d:1f:85:37:db:
                    0d:d0:80:ea:b2:dd:e9:7f:ea:7d:c2:e9:5d:c6:a3:
                    00:b7:be:5f:c4:a4:61:3d:88:4c:ca:72:a5:67:77:
                    64:ba:80:c2:10:f2:e7:37:2d:76:84:a1:28:77:f1:
                    8d:ac:59:8a:26:a0:78:e0:5e:42:49:52:4e:6b:43:
                    9e:cd:38:71:20:03:96:2e:ea:0a:07:b6:78:30:f4:
                    31:62:c7:1a:9c:50:9c:73:8f:77:77:72:d2:4e:5a:
                    d3:a4:d5:41:cc:98:f4:39:0a:96:86:97:02:e3:cc:
                    5a:fb:36:e0:5a:13:4c:16:6e:02:5f:23:34:b7:43:
                    40:b1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                60:E8:30:4A:BB:6A:AD:E6:68:40:AA:61:3A:21:7F:42:B5:E9:29:64
            X509v3 Authority Key Identifier:
                keyid:B1:58:4F:43:59:51:19:5F:9A:1F:34:5D:E3:A7:1C:0F:FA:ED:94:17

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/A59CF620A65B79C6CFCDD929FFE39B48A3CBF52DDB92C6B536AEE34C648130F9/0/B1584F435951195F9A1F345DE3A71C0FFAED9417.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/B1584F435951195F9A1F345DE3A71C0FFAED9417.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/A59CF620A65B79C6CFCDD929FFE39B48A3CBF52DDB92C6B536AEE34C648130F9/0/34352e3138342e3130322e302f32342d3234203d3e203631343638.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.184.102.0/24

    Signature Algorithm: sha256WithRSAEncryption
         9c:ab:51:af:0d:61:1c:68:41:cd:69:68:7b:fa:b0:5b:22:57:
         2d:4b:61:00:eb:3a:f8:1e:08:34:b1:ce:e0:1c:fe:00:d3:11:
         c4:4d:3f:ff:05:e6:8c:ee:3c:07:94:c9:ca:fe:72:f0:ee:3f:
         69:30:77:25:39:a9:d4:f6:5b:c0:91:7e:e0:d9:f1:61:6c:0e:
         9b:e7:2c:58:e0:23:41:d5:e9:ee:50:66:07:64:e8:da:13:90:
         1a:dc:89:23:9f:0d:90:a8:07:84:31:cc:65:ad:0c:88:5c:83:
         25:ce:c4:2c:d3:7d:0f:fe:0c:b5:e5:77:8c:79:55:a2:b6:f3:
         c0:e6:09:c6:3c:47:d3:f2:25:14:e5:38:6d:e8:74:c2:b2:f9:
         ff:ff:bb:68:1e:e5:a3:b2:98:96:97:6e:1a:30:f1:29:7d:9f:
         db:3b:c8:df:89:b3:9f:9d:37:77:50:4d:31:a1:8f:18:3d:19:
         9e:45:dc:e1:34:f0:7c:18:8b:e6:c2:6e:f5:a6:03:25:ba:43:
         41:40:28:a3:3f:db:e7:cb:3c:39:0e:f7:29:c3:21:92:24:b0:
         9f:8d:f8:2b:26:0c:56:8b:aa:31:3d:60:10:f0:63:2b:30:c2:
         2e:2a:95:07:c0:ea:d8:76:76:b2:9b:20:22:58:b0:21:79:51:
         9c:11:57:f9
-----BEGIN CERTIFICATE-----
MIIFvjCCBKagAwIBAgIUUV7SUDUFOyZFvbQolIbb4pNgjkAwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoQjE1ODRGNDM1OTUxMTk1RjlBMUYzNDVERTNBNzFDMEZG
QUVEOTQxNzAeFw0yNTAyMDQxODI0MDNaFw0yNjAyMDMxODI5MDNaMDMxMTAvBgNV
BAMTKDYwRTgzMDRBQkI2QUFERTY2ODQwQUE2MTNBMjE3RjQyQjVFOTI5NjQwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCufwzGIP4ky7twvcB4UGxrBwUY
h4olFTKC8VJOEm7AVbvv4OzR8DFjxVgxGz+kfR2QAu+lqrX1zlwy2KaeQiBvl8Xe
x9E10+yLV1mGWxRlKtL/TMuH4rjtI96jg++/M/MYsPJuwsbTBUnLl8It/piia8gz
8E22RKi4d5FoZ2W35SQdH4U32w3QgOqy3el/6n3C6V3GowC3vl/EpGE9iEzKcqVn
d2S6gMIQ8uc3LXaEoSh38Y2sWYomoHjgXkJJUk5rQ57NOHEgA5Yu6goHtngw9DFi
xxqcUJxzj3d3ctJOWtOk1UHMmPQ5CpaGlwLjzFr7NuBaE0wWbgJfIzS3Q0CxAgMB
AAGjggLIMIICxDAdBgNVHQ4EFgQUYOgwSrtqreZoQKphOiF/QrXpKWQwHwYDVR0j
BBgwFoAUsVhPQ1lRGV+aHzRd46ccD/rtlBcwDgYDVR0PAQH/BAQDAgeAMIGwBgNV
HR8EgagwgaUwgaKggZ+ggZyGgZlyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5l
dC9ycGtpL2xhY25pYy9BNTlDRjYyMEE2NUI3OUM2Q0ZDREQ5MjlGRkUzOUI0OEEz
Q0JGNTJEREI5MkM2QjUzNkFFRTM0QzY0ODEzMEY5LzAvQjE1ODRGNDM1OTUxMTk1
RjlBMUYzNDVERTNBNzFDMEZGQUVEOTQxNy5jcmwwgbkGCCsGAQUFBwEBBIGsMIGp
MIGmBggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jw
a2kvbGFjbmljL0ZEQzM1OTRERDRFNTRCQURFNzA5QUMwRDI1NUNGMjc5QzQ3NzE2
RDJFOEIzRjRENDVEQzQ2MzU1ODk5QjM2RDQvMC9CMTU4NEY0MzU5NTExOTVGOUEx
RjM0NURFM0E3MUMwRkZBRUQ5NDE3LmNlcjCBxwYIKwYBBQUHAQsEgbowgbcwgbQG
CCsGAQUFBzALhoGncnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9s
YWNuaWMvQTU5Q0Y2MjBBNjVCNzlDNkNGQ0REOTI5RkZFMzlCNDhBM0NCRjUyRERC
OTJDNkI1MzZBRUUzNEM2NDgxMzBGOS8wLzM0MzUyZTMxMzgzNDJlMzEzMDMyMmUz
MDJmMzIzNDJkMzIzNDIwM2QzZTIwMzYzMTM0MzYzOC5yb2EwGAYDVR0gAQH/BA4w
DDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEAC24ZjAN
BgkqhkiG9w0BAQsFAAOCAQEAnKtRrw1hHGhBzWloe/qwWyJXLUthAOs6+B4INLHO
4Bz+ANMRxE0//wXmjO48B5TJyv5y8O4/aTB3JTmp1PZbwJF+4NnxYWwOm+csWOAj
QdXp7lBmB2To2hOQGtyJI58NkKgHhDHMZa0MiFyDJc7ELNN9D/4MteV3jHlVorbz
wOYJxjxH0/IlFOU4beh0wrL5//+7aB7lo7KYlpduGjDxKX2f2zvI34mzn503d1BN
MaGPGD0ZnkXc4TTwfBiL5sJu9aYDJbpDQUAooz/b58s8OQ73KcMhkiSwn434KyYM
VouqMT1gEPBjKzDCLiqVB8Dq2HZ2spsgIliwIXlRnBFX+Q==
-----END CERTIFICATE-----
Generated at Sat Apr 5 16:37:07 2025 by rpki-client